Azure / Azure/azure-linux-extensions

ADE: RAID 0 disk does not get encrypted (single-pass)

Open
#666 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
333
Forks
278
Avg merge
2d 9h
Merged PRs (30d)
4

Description

When encrypting a Ubuntu VM (*Canonical:UbuntuServer:16.04-LTS:latest*)
with two data disks set up as a RAID 0 disk with the ```--volume-type all``` option.

The RAID disk does not get encrypted when using the ```--encrypt-format-all``` option,
without that option it get encrypted.

AzureDiskEncryptionForLinux version is **1.1.0.17**

I can see the *StatusReport* going from ```"data": "EncryptionInProgress"``` at one point to ```"data": "NotEncrypted"``` at the end of the log, but I cannot see any error message.

**extension.log**:
```
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] msg: Encryption settings stamped
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] OS volume / is mounted from /dev/mapper/osencrypt
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] Data volume /raid is mounted from /dev/md0
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] substatus: {"os": "Encrypted", "data": "EncryptionInProgress"}
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] Executing: mount
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] OS volume is already encrypted
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] ======= MACHINE STATE: completed =======
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] Encryption succeeded for all volumes
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] op: EnableEncryptionOSVolume
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] status: success
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] code: 0
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] msg: Encryption succeeded for all volumes
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] OS volume / is mounted from /dev/mapper/osencrypt
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] Data volume /raid is mounted from /dev/md0
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] substatus: {"os": "Encrypted", "data": "NotEncrypted"}
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] returned to daemon successfully after encryption
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] clearing the encryption mark.
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] op: EnableEncryptionOSVolume
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] status: success
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] code: 0
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] msg: Encryption succeeded for all volumes
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] OS volume / is mounted from /dev/mapper/osencrypt
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] Data volume /raid is mounted from /dev/md0
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: [StatusReport (0)] substatus: {"os": "Encrypted", "data": "NotEncrypted"}
2018/10/15 11:05:37 [Microsoft.Azure.Security.AzureDiskEncryptionForLinux-1.0]: 2701: [Info] exiting daemon

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.